Re: [PATCH 1/2] SELinux Context Label based audit filtering
On Fri, 2006-02-03 at 10:12 -0500, Stephen Smalley wrote:
9) If so, the audit system then asks for contexts for the relevant
SIDs
and adds them to the audit message. This might be an issue btw as we
might run into an allocation failure at this point.
Actually, this "filtering" isn't determining whether or not the context
is added to the messsage... Rather, it's determining whether or not
audit constructs the audit message at all and passes it to the audit
daemon for publication. Maybe, you realized that already--just
clarifying though.
:-Dustin
Attachments:
- signature.asc (application/pgp-signature — 189 bytes)